If there was a documented jtag port, I would like to erase the entire flash, and reprogram it from scratch, in a more intelligent way.
strange that no one has ever thought of this ...
... another alternative, physically unsolder the flash chip, reprogram it in the lab, re-solder it.
we'll see.